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We extend the results of Part I by considering a new class of agreement tasks, the 
so-called fc-Threshold Agreement tasks (previously introduced by Charron-Bost and Le 
Fessant). These tasks naturally interpolate between Atomic Commitment and Consen- 
sus. Moreover, they constitute a valuable tool to derive irreducibility results between 
Consensus tasks only. In particular, they allow us to show that (A) for a fixed set of 
processes, the higher the resiliency degree is, the harder the Consensus task is, and (B) 
^"*^ \ for a fixed resiliency degree, the smaller the set of processes is, the harder the Consensus 

task is. 

, The proofs of these results lead us to consider new oracle-based reductions, involving 

a weaker variant of the C-reduction introduced in Part I. We also discuss the relationship 
between our results and previous ones relating /-resiliency and wait-freedom. 
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1 Introduction 



In Part I of this paper, we developed several formal definitions of reduction in distributed 
computing that allowed us to formalize in which sense some distributed task is easier to solve 
than another one. We applied this formalism for reduction to compare two fundamental 



classes of agreement tasks, namely Binary Consensus and Atomic Commitment: we showed 
that even if Consensus and Atomic Commitment are syntactically very close, these two 
types of task are incomparable in most cases in the sense that Consensus is not reducible 
^ ' to Atomic Commitment, and vice-versa. 1 

Here in Part II, we consider the new class of agreement tasks introduced by Charron-Bost 
and Le Fessant [7j, the so-called k- Threshold Agreement tasks (/c-TAg, for short). Those 
tasks interpolate between Atomic Commitment and Consensus from a purely syntactic 
standpoint: for the lowest parameter value k = 1, k-TAg coincides with Atomic Commit- 
ment, and for the highest parameter value k = n (where n is the number of processes) 
/c-TAg coincides with Consensus (see Section 2 in (7j and infra). 

We begin by comparing the various agreement tasks k-TAg(n, /) when varying the pa- 
rameter k, the number of processes n, and the resiliency degree /. We do that in generalizing 
each of the reducibility and irreducibility results established in Part I for Atomic Commit- 
ment and Consensus, and in extending their scope to the general class of /c-Threshold 
Agreement tasks. 

Then, by combining these results for the k-TAg tasks, we derive new irreducibility results 
for Consensus tasks only. Notably, we establish two irreducibility results both revealing that 

Taboratoire LIX, Ecole Polytechnique, 91128 Palaiseau Cedex, France 
More precisely, Consensus and Atomic Commitment are not comparable, except when the resiliency 
degree is 1 in which case Consensus is easier than Atomic Commitment. 
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"wait-freedom is harder to achieve than /-resiliency" in the case of Consensus tasks. More 
precisely, we show that (A) for a fixed set of processes, the higher the resiliency degree is, 
the harder the Consensus task is, and (B) for a fixed resiliency degree, the smaller the set 
of processes is, the harder the Consensus task is. 

When the resiliency degree / is less than n/2 (that is, when a majority of processes is 
correct), the fact that wait-free Consensus is harder than /-resilient Consensus is not very 
surprising. Indeed, Fischer, Lynch, and Paterson (Hj have shown that in the more benign 
failure model of initial crashes, /-resilient Consensus is solvable with a minority of faulty 
processes, whereas wait-free Consensus is not solvable with initial crashes. However, our 
two irreducibility results (A) and (B) are more surprising in view of prior work comparing 
Consensus tasks in the message passing and shared memory models. 

Firstly, an immediate corollary of the main results established by Chandra, Hadzilacos, 
and Toueg [f3 E] is that for a fixed set of processes, the same information about failures is 
necessary and sufficient to solve all the Consensus tasks with a majority of correct processes. 
Using the notion of Failure Detectors, this can be rephrased by saying that the weakest 
Failure Detectors to solve the Consensus tasks with a majority of correct processes are 
identical. From this viewpoint, all these tasks are therefore equivalently hard to solve. On 
the contrary, we show that they are not equivalent with respect to any of the reductions 
defined in Part I - in particular with respect to the most natural and meaningful reduction 
in this context, namely the C-reduction. Compared with (A), the results in [H1IEJ show that, 
if we introduce the Failure Information hierarchy (Fl-hierarchy, for short) which assesses 
the hardness to solve a task only by the minimal information about failures that is required 
to solve it, then the C-hierarchy is strictly finer than the Fl-hierarchy. In other words, 
the minimal information about failures - or equivalently the weakest Failure Detector - 
necessary for solving a task does not fully capture the hardness to solve it. 

As for our second irreducibility result (B), it seems to contradict Borowsky and Gafni's 
simulation |2j, and more specifically its variants described by Lo and Hadzilacos ^0] and 
by Chandra, Hadzilacos, Jayanti, and Toueg |3j in the case of Consensus tasks. Indeed, this 
simulation consists in a general algorithm for the shared memory model which allows a set 
of / + 1 processes with at most / crash failures to simulate any larger set of n processes also 
with at most / crashes. In the case of Consensus tasks, this simulation provides a general 
transformation of algorithms that solve the /-resilient Consensus task for n processes using 
read/write registers into ones that solve the wait-free Consensus task for /+1 processes using 
read/write registers also. On the contrary, we show that in the message passing model, the 
wait-free Consensus task for / + 1 processes is not C-reducible to the /-resilient Consensus 
task for a strict superset of n processes. We could think that the discrepancy between the 
work in the papers cited above and our results comes from the fact that the message passing 
and the shared memory models are precisely not equivalent here (a majority of processes 
may fail in the wait-free case). However, a closer look at the transformations of algorithms 
reveals that the discrepancy actually results from a more basic point. Indeed, in our work, 
we use notions of reductions which rely on suitably defined distributed oracles, which are 
closed black boxes that cannot be opened. We have no access to their internal mechanisms, 
and are not allowed to dismantle them and to distribute them onto the different processes 
in the system. This is the reason why the transformations in have no translation in 
terms of oracle-based reductions. So the discrepancy between these prior results and ours 
reflects substancial differences between the underlying types of reduction. This highlights 
the need to give precise definitions to the reductions that we handle. 

Another contribution of Part II is to introduce new oracle-based reductions. Namely, 
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when comparing the hardness to solve the two /-resilient tasks /-TAg(n, /) and (/ + 1)- 
TAg(ra, /), we have been led to consider various weakenings of the C-reduction in which the 
oracles are more powerful than those used for the C-reduction. The resulting new kinds of 
reductions differ from the C-reduction not in the way processes query oracles, but rather 
in the quality of the oracles that are used. More precisely, to each task T = (P, f) we 
associate some /-resilient oracle suitable for P which is more deterministic than the oracle 
O.T defined in Part I, in the sense that the set of all its possible behaviors is smaller. Such 
an oracle is therefore more powerful than O.T, and so yields a weaker type of reduction d 
la Cook. 

Part II of this paper is organized as follows. In Section 2, we introduce the /c-Threshold 
Agreement tasks, and derive some simple reductions between these tasks from their speci- 
fications only. Then, in Sections 3 and 4, we generalize the C- and C*-reducibility results 
of Part I to this new class of agreement tasks. In Section 5, we give generalizations of the 
irreducibility statements established in Part I, completing the picture of the C-hierarchy 
between the fc-Threshold Agreement tasks. Then we derive irreducibility results between 
Consensus tasks only, and we show that wait-free Consensus is strictly harder to achieve 
than /-resilient Consensus in Section 6. This section proceeds with a discussion of these 
results comparing them with prior work relating wait-freedom and /-resiliency. 

2 k-Threshold Agreement tasks 
2.1 Definitions and notation 

The main results in Part I show that /-resilient Consensus and Atomic Commitment tasks 
are generally not comparable from an algorithmical point of view: except in the case / = 1, 
there is no algorithm which converts a solution to Consensus into a solution to Atomic 
Commitment, and vice-versa. 

However, Consensus and Atomic Commitment problems are very close in the sense that 
their specifications are identical, except the validity conditions which are slightly different. 
As a matter of fact, it is possible to link these two specifications from a purely syntactic 
standpoint, as was done in [7] by Charron-Bost and Le Fessant who introduced, for any set 
II of n processes and any integer k £ {1, • • • , n}, the k- Threshold Agreement problem for II 
(the /c-TAgn problem, for short). Parameter k is called the threshold value of /c-TAgn- 

Formally, we have V = {0, 1}, V fe . XAgn = {0, l} n , and for any (F, V) € Tji x {0, l} n , 

. A;-TA gri (F, V) = {0} if \{p e II : V(p) = 0}| > k, 

• £>TAgn(F, V) = {1} if V = 1 and \Faulty(F)\ < k - 1, 

• k-TAg n (F,V) = {0,1} otherwise. 

In other words, the k-TAg validity condition expresses the fact that (1) if at least k processes 
start with 0, then is the only possible decision value, and (2) if all processes start with 1 
and at most k — 1 failures occur, then 1 is the only possible decision value. 

This new problem is a straightforward generalization of the Atomic Commitment prob- 
lem (1-TAg coincides with Atomic Commitment), but turns out to be also a generalization 
of Consensus. Indeed, ra-TAg actually corresponds to binary Consensus, since at least one 
process in II is correct. We have thereby defined a chain of problems which interpolates 
between Atomic Commitment and (binary) Consensus. The main motivation for this gener- 
alization is theoretical: it is interesting to connect two incomparable problems by exploiting 
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differences in validity conditions. But it is easy to imagine actual situations in which such 
a generalization arises naturally: for example, it might be desirable for processes to enforce 
them to decide (abort) only if a majority of processes initially propose (no), but to 
require that they decide 1 (commit) if all of them initially propose 1 (yes) as soon as a mi- 
nority of processes are faulty. Indeed, the latter problem corresponds exactly to the k-TAg 
problem with the threshold value k = [n/2\ + 1. 

For any integer / such that < / < n — 1, we denote /c-TAg(II,/) the distributed 
task defined by the problem fc-TAgn and the resiliency degree /. Hence we have a chain of 
n tasks l-TAg(n,/), • • • , n-TAg(II, /) which syntactically relates AC(n,/) = l-TAg(II, /) 
to Cons(II, /) = n-TAg(Il,/). Observe that two consecutive tasks in this chain are not 
comparable a priori, since the two parts of the validity condition are entangled: the first 
part for /c-TAgn enforces the first part for (fc+l)-TAgn, and the second part for /c-TAgn is 
implied by the second part for (/c+l)-TAgn- 

Recall that Fischer, Lynch, and Paterson (Sj have established the impossibility of some 
agreement task with resiliency degree 1 that is attached to a problem weaker in its validity 
condition than all the above k-TAg problems. 2 

Consequently, for any set II of n processes and for any integers k and / such that 
1 < k < n and 1 < / < n — 1, the task fc-TAg(II, /) is not solvable in an asynchronous 
system. 

In the sequel, we denote by k-TAg(n, f) the /-resilient task defined by the /c-Threshold 
Agreement problem for the set of process names II = {1, • • • , n}, that is: 

fc-TAg(n,/) = fc-TAg({l,»- ,n},f). 

Clearly, for any set II of n processes and for any renaming $ : {1, • • ■ , n} — ► II, we have: 

"k-TAg(n,f) = k-TAg(U,f), (1) 

and consequently like Cons(II, /) and AC(I1, /), /c-TAg(II, /) is a symmetric task. 

2.2 Oracles suitable for k-TAg problems 

Following Section 1.3.3, to each task k-TAg(H, /), we associate a unique oracle, denoted O.k- 
TAg(LT, /), which is the most general /-resilient oracle suitable for the agreement problem 
fc-TAgn. 

Several results in the sequel rely on the following claims about the Cfe-TAg(II, /) oracles. 

Claim Ol: For any failure pattern F for li, and for any consultation in a history of 
C.fc-TAg(n, f)(F), if at most \H\ — k queries have value 1 (that is at least k queries are 
either missing or have value 0), then the only possible response of the oracle is 0. 

Proof: Form the partial vector W with the queries in the consultation of 0.£>TAg(II, /). 
Since at most |II| — k components of W are equal to 1, there is an extension V of W in 
{0, l} n with at least k components equal to 0. By the first part in the validity condition 
of fc-TAgn, we have /c-TAgn(i ? , V) = {0}. Hence, is the only possible response by O.k- 
TAg(n, f){F) in the consultation with the query vector W . □ 



2 Namely, the validity condition in [H] only specifies that for every value v £ V, there is an execution in 
which some process decides v. 
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Claim 02: For any failure pattern F for H with less than k faulty processes, and for any 
consultation in a history of 0.k-TAg(U, f)(F), if all the query values are 1, then the only 
possible response of the oracle is 1. 

Proof: This is a straightforward consequence of the second part in the validity condition 
of fc-TAgn. □ 

Notice that the property Ocons of Consensus oracles (cf. Section 1.3.3) coincides with 
the conjunction of Claim 01 and Claim 02 for the threshold value k = |II|, and the property 
Oac °f Atomic Commitment oracles (cf. Section 1.3.3, too) coincides with Claim 01 for 
the threshold value k = 1. 



2.3 Some k-TAg tasks are generalizations of Consensus 

One trivial but useful kind of .fT-reduction is reduction by generalization. We say that task 
Ti is a generalization of task T\ when, informally, the resiliency degree of T2 is not greater 
than the one of Ti, the inputs for Ti are inputs for T2, and for those inputs, any solution 
for T2 is also a solution for T\. Formally, T\ = (Pi, f\) is a generalization of T2 = (P2, f-i) 
if fi < /2, Vpj C Vp 2 , and for any input vector V € Vp 1 and any failure pattern F such 
that \Faulty(F)\ < fi, we have P2(P, V) C Pi(F,V). When these conditions are satisfied, 
we shall also say that Ti is a special case of T2 . Notice that if T2 is a generalization of Ti , 
then there is a trivial .ff-reduction from Ti to T2: just take R to be the algorithm which 
does nothing. 

A first example of reduction by generalization is the reduction from any task Ti = 
(P, f\) to T2 = (P, f2) with fx < f2- To illustrate this notion with a less trivial example, 
consider the Weak Agreement problem for II introduced in (Hj , denoted WAg n and defined 
by VwA gn = {0, l} n and for any (P, V) G T\\ x {0, l} n , 

• WAg n (P, V) = {0} if V = and Faulty (F) = 0; 

• WAg n (P, V) = {1} if V = 1 and Faulty(F) = 0; 

• WAg n (P,y) = {0,1}, otherwise. 

Both Cons(II, /) and AC(II, /) are generalizations of WAg(II, /) = (WAg n ,/). More gen- 
erally, WAg(IT, /) is a special case of fc-TAg(II, /) for any k € {1, . . . , n}. 

As we shall show in Proposition I2.1| there is a chain of reductions by generalization 
that can be traced among the set of /-resilient tasks {l-TAg(n, /),••• , n-TAg(n, /)} from 
threshold k = f +1. 

Proposition 2.1 // n and f are two integers such that 1 < / < n — 1, then for any 
k € {/+1, • • • ,n — 1}, the task fc-TAg(ra, /) is a generalization of (/c+l)-TAg(n, /), and so 
(/+l)-TAg(n, /) is a generalization o/Cons(n,/). 

Proof: Let II be any set of n processes. We only have to prove that for any input vector 
V G {0, l}^ 1 ' " ,n } and any failure pattern F for II such that \Faulty(F)\ < f, we have 

£>TAg n (P,y) C (fc+l)-TAg n (P,y). 

This inclusion is obvious when (fe+l)-TAgn(P, V) = {0, 1}. Therefore, we need to consider 
the following two non-trivial cases only: 
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1. \{p € n : V(p) = 0}| > k+1. 

A fortiori, \{p E II : V^(p) = 0}| > A; and thus we have 

k-TAg u (F,V) = (k+l)-TAg u (F,V) = {0}. 

2. V = 1 and \Faulty(F)\ < k. 

Since we only examine the failure patterns with at most / failures and k > f+1, we 
actually have \Faulty(F)\ < k — 1. It follows that 

k-TAg u (F, 1) = (fc+l)-TAg n (F, 1) = {1}. 

□ 

3 C-reductions between k-Threshold Agreement tasks 

This section is devoted to several generalizations of the C-reductions established in Part I. 
First we shall show that k-TAg(n, f) is C-reducible to (/s+l)-TAg(n+l, /+1). Then we shall 
complete Proposition 12 . 1 1 and the comparison of the tasks (/+l)-TAg(n, /),..., n-TAg(n, /) 
by showing that all these tasks are actually equivalent - that is, of the same unsolvability 
degree - with respect to the C-reduction. Finally, we shall consider k-TAg(n, f) when the 
threshold value k takes the preceding value /, and shall compare the task /-TAg(n, /) with 
n-TAg(n, /) = Cons(n, /). For that, we shall introduce a slightly weaker notion of reduction 
a la Cook, the c C-reduction, which differs from the original C-reduction in the power of 
oracles (but not in the way oracles are queried). We shall show that when a majority of 
processes is correct, i.e., when n > 2f, the degree of unsolvability - with respect to the 
c C-reduction - of /-TAg(n, /) is higher or equal to the one of Cons(n, /). 

3.1 C-reduction between k- and (k+l)-TAg tasks 

Let II be any set of n + 1 processes, and let II' be any subset of II with n processes. The 
C-reduction from fc-TAg(lT, /) to (k + l)-TAg(II, / + 1) is simple: Each process in II' just 
needs to query the oracle 0.(k+l)-TAg(Tl, f+1) with its initial value. The oracle eventually 
gives a response since it is consulted by at least n — f = (n+1) — (/ + 1) processes. Every 
process finally decides on the value provided by 0.(fc+l)-TAg(n, 

Thus termination and agreement are obviously guaranteed. For the fe-validity condition, 
consider a run of this algorithm for II' with at most / failures. Firstly, suppose that at least 
k processes start with 0; at least k + 1 queries in the consultation of C.(fc+l)-TAg(II, 
are either missing or with value since the process in II \ II' does not query the oracle. 
By Claim 01, the oracle may not answer any value else than 0, and so the only possible 
decision value is 0. Now, suppose that all processes start with 1 and at most k — 1 processes 
fail in this run. With respect to II, at most k processes crash, and by Claim 02 applied to 
the oracle C(fc + l)-TAg(n, / + 1), the only possible answer value given by this oracle is 1. 
Therefore, 1 is the only possible decision value. This establishes: 

Theorem 3.1 If n, f and k are three integers such that 1 < / < n — 1 and 1 < k < n, then 
fc-TAg(n,/) is C-reducible to (/c+l)-TAg(n+l, 

Notice that in the particular case k = n, Theorem 13.11 states that Cons(n, /) is C- 
reducible to Cons(n+l, /+!), and consequently it generalizes Proposition 1.7.5. 
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Variables of process p : 

x p G V, initially v p 
Algorithm for process p : 

Send(v p ) to all 

wait until [Receive (v q ) from n — f processes] 

x p := min{w g : received v q } 

Query (O.Cons(ILJ))(x p ) 

Answer (0.Cons(II, /)) (d) 

Decide(d) 

Figure 1: A C-reduction from (/ + l)-TAg(II, /) to Cons(n,/). 



3.2 Degree of unsolvability of Consensus tasks 

As stated in Proposition ^, 11 each task fc-TAg(n, /) with k € {/+1, • • • , n} is a generalization 
of Cons(n, /). Hence Cons(ra, /) trivially C-reduces to any of these ^-Threshold Agreement 
tasks. We shall next show that conversely (/+l)-TAg(n, /) is C-reducible to Cons(n, /). It 
will then follow that any fc-TAg(n, /) with k € . . . , n} is equivalent to Cons(n, /) with 

respect to C-reducibility. In other words, (/ + l)-TAg(n, /),..., n-TAg(n, /) = Cons(n, /) 
have the same unsolvability degree. 

Let IT be any set of n processes. There is quite a simple C-reduction from (/ + 1)- 
TAg(II, /) to Cons(II,/): Firstly, processes make their initial values more uniform. For 
that, every process sends its initial value to all, waits until receiving initial values from 
n — f processes, and then sets a local variable to the minimum value that it has received. 
Secondly, each process queries the oracle CCons(II, /) with the value of this local variable, 
and then decides on the value answered by the oracle. 

Proposition 3.2 Let n and f be two integers such that 1 < / < n — 1, and let II be a set 
of n processes. The algorithm in Figure^ that uses the oracle Cons(IT, /), solves the task 
C(/ + l)-TAg(n,/), and so (/ + l)-TAg(n, /) is C-reducible to Cons(n,/). 

Proof: Let p =<F,I,H > denote a run of the algorithm in Figure H with at most / 
failures. Obviously, p satisfies the termination, irrevocability, and agreement conditions. 
We are going to prove that p also satisfies the two requirements of (/+ Invalidity condition. 

1. Suppose that at least / + 1 processes start with value 0. Since at most / processes 
fail, each process that is still alive receives at least one message with value 0, and so 
queries the O.Cons(II,/) oracle with value 0. From the property Orjons in Part I, it 
follows that 0.Cons(Il, /) definitely answers 0. Therefore every process that makes a 
decision decides 0. 

2. Now suppose that all the processes start with value 1, all the query values of CCons(II, /) 
are equal to 1. Again by the property Ocons, the only possible answer given by 
O.Cons(n, /) is 1, and processes decide 1. 

□ 
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3.3 A reduction with a majority of correct processes 

Propositions 12.11 and 13.21 establish that (/+l)-TAg(n, /),..., n-TAg(n, /) = Cons(?i, /) are 
all of same degree of unsolvability with respect to <c ■ In this section, we compare these 
equivalent tasks with /-TAg(n, /): we show that if n > 2f, then /-TAg(n, /) is at least as 
hard to solve as Cons(n, /). 

In the case / = 1, this result will compare Cons(n, 1) with AC(n, 1) when n > 2. 
However, the reduction that we shall describe does not coincide with the reduction from 
Cons(n, 1) to AC(n, 1) given in Proposition 1.8.4. Indeed, contrary to this latter reduction, 
our algorithm which uses an oracle for /-TAg(n, /) actually solves Cons(ri, /) only if the 
oracle is consistent, namely if it satisfies the following condition: if the oracle answers in 
some consultation in which all the query values are equal to 1, then it will also answer 
in any subsequent consultation. In other words, a consistent oracle for /-TAg(n, /) which 
answers some value on the grounds of informations about future failures, does not forget 
these informations and takes them into account in its subsequent answers as it does in its 
previous answers. 

We are going to define consistent oracles precisely. First, let us observe the following 
fact: if P is an agreement problem for some set II of processes, and if W± and W2 are two 
partial vectors in V n such that W± is an extension of W2 (denoted W\ > W2), 3 then for 
any failure pattern F for II we have 

n p(f,v)c p| p(f,v). 

[vizyu . v>w 2 } {vev n ■. v>w\} 

Definition 3.3 Let O a be an oracle whose set of consultants is II, and which is suitable for 
some agreement problem P for II. We say that O a is a consistent oracle if for any failure 
•pattern F for IT, any history H € O a {F), and any two consultations of O a in H with query 
vectors W\ and W2 such that W\ > W2, O a answers d in the consultation with query vector 
W2 only if it answers d in the consultation with query vector W\ . 

For any task T = (P,f), we restrain the set of histories of the oracle in order to get 
the most general oracle which is consistent, /-resilient, and suitable for P. In this way, we 
obtain an oracle, denoted c O.T, which is at least as powerful as O.T in the sense that for 
any failure pattern F for II, c O.T(F) C O.T(F). 

This yields a new notion of reduction a la Cook, denoted <c<7, in which algorithms may 
only use the consistent versions of oracles. Formally, T\ <cq T2 if there is an algorithm for 
T\ using the consistent oracle c O.T2- 

Since c O.T is at least as powerful as O.T, C-reducibility implies c C-reducibility. Equiva- 
lently, c C-irreducibility results yield the corresponding C-irreducibility results (see Sectional 
infra) . 

Thanks to this new notion of reducibility, we shall be able to compare the two tasks 
/-TAg(n,/) and (/+l)-TAg(n, /). 

Let II be any set of n processes, and let / be a positive integer such that n > 2/. In 
Figure we give an algorithm using the consistent oracle for /-TAg(II, /) which solves 
the task (/ + l)-TAg(II, /). Our algorithm uses the oracle c 0.f-TAg(U, f) twice: the first 
time to achieve an "approximate (/ + l)-Threshold Agreement" on the initial values, and 

3 Recall that Wi is an extension of W2 if the domain of definition IIi of the mapping Wi contains the one 
II2 of W2, and for any p G II2, we have Wi(p) = VK 2 (p). 
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the second time to get some informations about failures. More precisely, with the help of 
this oracle, processes determine whether less than / failures occur or not in the run. In 
the first case (less than / failures), a solution for the /-TAgn problem is also a solution for 
(/ + l)-TAgn- If exactly / failures occur, the algorithm is designed so that processes never 
make a wrong decision, and correct processes make a decision at the latest just after the 
last crash. The complete code of the c C-reduction is given in Figure [21 

Theorem 3.4 Let n and f be two integers such that 1 < 2/ < n — 1, and let II be a set of 
n processes. The algorithm in Figure\^that uses c C/-TAg(II, /) solves (/ + l)-TAg(IT, /), 
and so (/ + l)-TAg(n, /) is c C-reducible to /-TAg(n, /). 

Proof: First notice that Claims 01 and 02 still hold for any consistent oracle c 0.k- 

TA g (n,/). 

Let II be a set of n processes, and let p =<F, I , H> denote a run of the algorithm in 
Figure El with at most / failures. By the /-resiliency property, the oracle c C/-TAg(II, /) 
definitely answers in each of its two consultations in p. Let d denote the second answer. 

To prove that p satisfies the termination, irrevocability, agreement, and (/ + Invalidity 
conditions, we shall distinguish the cases d = and d = 1. 

Case d = 1. Irrevocability, termination and agreement are obvious. 
Let us prove that p satisfies the (/ + Invalidity condition. 

1. Suppose that at least f+1 processes start with 0. We consider the first consultation of 
c O./-TAg(n, /): each of these processes that starts with either does not query the 
oracle (because they crash) or queries it with value 0. By Claim 01, the first response 
given by c O./-TAg(n, /) is necessarily equal to 0, and processes decide 0, as required. 

2. Now assume that all the initial values are equal to 1. Since c 0./-TAg(n, /) is supposed 
to be consistent and d = 1, the oracle may not answer in the first consultation. 
Therefore v = 1 and processes decide 1 in p. 

Case d = 0. First, we prove that p satisfies both the agreement and irrevocability conditions. 
By the rule which determines when a process proposes value v € {0, 1} (i.e., sends (P,v,r) 
to all), it is impossible for a process to propose and for another one to propose 1 at the 
same round. Suppose now that some processes make a decision in p; let r denote the first 
round at which a decision is made, and let p denote a process that decides at round r. 
Process p has received at least / + 1 propositions for its decision value v at round r. Thus 
every process q receives at least one proposition for v at round r, and so we have x q = v at 
the end of round r. Hence every process that is still alive decides v at the latest at round 
r + 1, and keeps deciding v in all subsequent rounds. In other words, p satisfies agreement 
and irrevocability. 

For termination, we argue as for the reduction from Cons(n, 1) to AC(n, 1) (see Sec- 
tion 1.8.3). Since every second query value of c 0./-TAg(n, /) is 1 and d = 0, by Claim 02 
exactly / failures occur in run p. For every process p, we consider the first round r p process 
p executes after the last failure occurs in p, and we let r p = m.aXp £Correct ^p-j(r p ) . If some 
process makes a decision by round r p , then the above argument for agreement shows that 
every process that is still alive at the end of round r p has made a decision by the end of 
this round. Suppose no process has made a decision by the end of round r p . All correct 
processes receive the same set of n — f messages of the form (R, — , r p ), and so they propose 
the same value w G {0, 1, ?} at round r p . 
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Variables of process p 



x p G V, initially v p 
r p <E if, initially 1 

Algorithm for process p : 

Query( c 0.f-TAg(UJ))(v p ) 
Answer( c 0.f-TAg(U, f))(v) 
Query( c 0.f-TAg(IlJ)){l) 
Answer( c O. /-TAg(n, f))(d) 
if d= 1 
then 

Decide(v) 
else 

repeat forever 

Send((R,x pi r p )) to all 

wait until [Receive{(R, *,r p )) from n — f processes] (where * can be or 1) 

if at least / + 1 of the ((R, *, r p ))'s received have value in the second component 

then 

Send{(P,Q,r p )) to all 
else 

if all the ((R, *,r p ))'s received have value 1 in the second component 
then 

Send((P,l,r p )) to all 
else 

Send((P,?,r p )) to all 
wait until [Receive((P, *, r p )) from n — f processes] (where * can be 0, 1, or ?) 
if at least / + 1 of the ((P, *,r p ))'s received have the same w G {0, 1} in the second component 
then 

x p := w 

Decide(w) 
else 

if one of the ((P, *, r p )}'s received have w € {0, 1} in the second component 
then 

x p := it) 
else 

Xp := 
r p := r p + 1 



Figure 2: A c C-reduction from (/+l)-TAg(n, /) to /-TAg(n,/) 
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If w 7^?, then every correct process decides w since it receives n — f propositions for 
w and n — f > f + 1. Otherwise, w =? and every correct process p sets its variable x p to 

in the end of round r p . Since n — f > f+1, it is easy to see that every correct process 
proposes at round r p + l, and so every correct process decides 0. This completes the proof 
of termination. 

Finally, let us establish that p satisfies the (/+ Invalidity condition: 

1. A simple inductive argument shows that if at least f+1 processes start with value 0, 
then at any round, value 1 may not be proposed by any process. Therefore in this 
case, is the only possible decision value. 

2. Now suppose that all processes start with the same initial value 1. Every process 
proposes 1 at the first round, i.e., sends (P, 1, 1) to all. As n — f > f + 1, it follows 
from the code that each process then decides 1. 

□ 

As mentioned above, Theorem 13 . 41 st at es a c C-reducibility result which is, in the partic- 
ular case / = 1, slightly weaker than the C-reducibility result given by Theorem 1.8.4. An 
open question is whether (/ + l)-TAg(n, /) is actually C-reducible to /-TAg(n, /). If not, 
this would show in particular that C-reduction is strictly stronger than c C-reduction. 

4 C*-reductions between k-Threshold Agreement tasks 

In this section, we establish two C*-reducibility statements for the ^-Threshold Agreement 
tasks which compare £;-TAg(n, /) with (fc+l)-TAg(n+l, /) and (fc+l)-TAg(n, /) respectively, 
and contain all the C*-reducibility results established in Part I. Interestingly, the two C*- 
reductions that we give here are similar, except in their final decision rule. 

4.1 C*-reduction when varying threshold value and number of processes 

Since Cons(n, /) is generally not C-reducible to AC(n, /) (cf. Theorem 1.8.2), we cannot 
expect to extend the C-reducibility result in Proposition 12.11 from (k+ l)-TAg(n, /) to k- 
TAg(n, /) for all the threshold values k less than / + 1. Nevertheless, we are going to show 
that (fc+l)-TAg(ra + 1, /) is always C*-reducible to fc-TAg(n, /). 

Let n denote the set of n + 1 processes {1, • • ■ ,n+l}. We consider the n+1 subsets of 
n of cardinality n, and we denote IT = II \ {i}. We use i as shorthand for /c-TAg(IIj, /); 
hence i is the sanctuary of the oracle Cfc-TAg(IIj, /) (cf. Section 1.3.3). 

In Figure 13 we give the code of a simple (/E + l)-Threshold Agreement algorithm for II 
using the oracles 0.fc-TAg(IIi, /), . . . , Cfc-TAg(II^fi, /). Informally, every process i con- 
sults these oracles with its initial value Vi, according to the order 1, . . . ,n + l, except the 
oracle 0./c-TAg(Hj, /) since i is not a consultant of this oracle (i £ As soon as process 

1 gets a response from an oracle, i broadcasts it in II. In this way, it eventually knows all 
the values answered by the oracles (including the one by 0.fc-TAg(IT, /)), and then decides 
on the greatest value. 

Proposition 4.1 If n, f and k are three integers such that 1 < / < n — 1 and 1 < k < n, 
then the algorithm in Figured solves the task (/c+l)-TAg(ra+l, /), and so (fe+l)-TAg(n+l, /) 
is C*-reducible to fc-TAg(n, /). 
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Algorithm for process i : 

initialization: 

di € V U {_L}, initially _L 

for I = 1 to n+1 do: 
if Z ^ i then 

Q M ery(0.fc-TAg(IL, /))<«,) 

Answer (O. k-TAg{U h f))( Wl ) 

Send ((I, wi)) to all 
wait until [Receive ((I, wi)) for all I 6 {l,** • , n+1}] 

:= max i=1 ... >T!+ i(^) 
Decide (di) 

Figure 3: A C*-reduction from (/c+l)-TAg(n+l, /) to fc-TAg(n, /). 



Proof: We first prove the termination property. By induction on i, we easily show that 
every oracle 0.fc-TAg(IL;, /) is consulted by at least |l~Ij| — / = n — f processes, and so no 
process is blocked in the sanctuary 1. Every correct process p S IT thus gets an answer 
from the oracle 0.k-TAg(Hi, /), and then broadcasts it in II. Since n > /+1, each subset 
IT contains at least one correct process. Therefore every correct process eventually knows 
the n + 1 values answered by the oracles 0.fc-TAg(IIi, /),..., O.A;-TAg(n r ^_i, /), and then 
makes a decision. 

Irrevocability is obvious. Agreement follows from the decision rule and the fact that 
every process which makes a decision knows all the values answered by the oracles. 

For the validity condition, consider any run of the algorithm with at most / failures. The 
proof of termination shows that each oracle O.k- TAg(IIj, /) answers to all its consultants. 

1. Suppose that at least k + 1 processes in II start with 0. In each subset Ilj, at least k 
processes either do not query the oracle C/c-TAg(Ilj, /) or query it with value 0. By 
Claim 01, every oracle necessarily answers 0, and so the decision value is 0. 

2. Suppose now that all the all the initial values are 1 and at most k (and so at most 
mm(k, /)) processes crash. Among the subsets IIi, . . . ,11^1 are at least k with less 
than k faulty processes. By Claim 02, the corresponding oracles are bound to answer 
1. From the decision rule, it follows that the decision value is 1 since we have k > 1. 

This shows the ( A; + Invalidity condition. □ 

Note that for k = n, Proposition 14. II yields 

Cons(n + 1, /) <c* Cons(n, /), 

which is also a consequence of the C-reduction from Cons(n + 1, /) to Cons(n, /) that we 
have shown in Part I (Proposition 1.7.4). 

More interestingly, by Proposition 14.11 applied / times, we obtain 

(/+l)-TAg(n + /,/)< c7 , AC(n,/). 

Since the task (/+l)-TAg(n + /, /) is equivalent to Cons(n + /, /) with respect to <c , we 
have 

Cons(n + /,/)< c , AC(n,/), 
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which is the first C*-reduction established in Theorem 1.6.4. 

Finally, observe that if we were able to strengthen Theorem 13.41 by proving that (/+1)- 
TAg(n+/-l, /) is actually C-reducible (and not only c C-reducible) to (/+l)-TAg(n+/-l, /) 
when n + f — 1 > 2/, then we could stop one step before when applying Proposition 14.11 
This would yield the better C*-reducibility result 

Cons(n + /-l,/)<c* AC(n,/) 

when / < n — 2. 

4.2 C*-reduction when varying the number of processes only 

From Proposition 14.11 we cannot derive that AC(n+l,/) is C*-reducible to AC(n, /) (cf. 
Proposition 1.7.1). A general statement for fc-Threshold Agreement tasks which would 
extend this latter C*-reducibility result would necessarily compare two tasks with the same 
threshold value. 

It turns out that, by just substituting "min" for "max" in the decision rule in Figure EJ 
the resulting algorithm solves the task fc-TAg(n + 1, /). This shows that /c-TAg(re + 1, /) 
is C*-reducible to fc-TAg(n, /). The proof is similar to the one of Proposition 14.11 and is 
therefore omitted. 

Proposition 4.2 If n, f and k are three integers such that 1 < / < n — 1 and 1 < k < n, 
then the task /c-TAg(n+l, /) is C* -reducible to k-TAg(n, /). 

Specializing k to 1 in Proposition ^. 21 we actually recover that AC(n,+l, /) is C*-reduciblc 
to AC(n, /). Note that when k > /+1, Prop osition 14 . 1 1 can be derived from Propositions 12. ll 
and El 

5 C-irreducibility results between k-Threshold Agreement 
tasks 

In this section, we shall examine generalizations of the two C-irreducibility results between 
Consensus and Atomic Commitment tasks established in Part I. More precisely, we shall 
prove that for a fixed set II of n processes, and a fixed resiliency degree /, 1 < / < re— 1, the 
task /c-TAg(II, /) is incomparable with Cons(II, /) with respect to <c for any threshold 
value k E {1, . . . , /— 1}. 

By PropositionsOandEni we know that the tasks (/+l)-TAg(II, /),..., n-TAg(II, /) = 
Cons(II, /) are all of the same unsolvability degree. Thus it remains to compare the task 
/-TAg(II, /) with Cons(II, /) to get a complete picture of the relationships between the 
various ^-Threshold Agreement tasks for a fixed set of processes and a fixed resiliency 
degree. 

To some extent, Theorem 13.41 answers this question when a majority of processes is 
correct (n > 2/), since it establishes that Cons(II, /) is c C-reducible to /-TAg(II, /). We 
shall prove that this does not hold anymore with a minority of correct processes: if n < 2/, 
then Cons(II, /) is not c C-reducible (and so not C-reducible) to /-TAg(II, /). 

Besides providing a better understanding of the connections between the various tasks 
£>TAg(n, /), the three irreducibility results that we establish in this section will play a key 
role in the proofs of our final results comparing wait-free and /-resilient Consensus tasks 
(see Section El infra) . 
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5.1 C-irreducibility to wait-free Consensus tasks 

Theorem 5.1 For every integers n, f, k such that 1 < k < f <n — 1, the task fc-TAg(ra, /) 
is not C-reducible to Cons(n,re — 1), and so is not C -reducible to Cons(n, /). 

Proof: Let II be a set of n process names. Suppose, for the sake of contradiction, that 
there is an algorithm R for the task fc-TAg(II, /) which uses the oracle O.Cons(II, n — 1). 
Let IIi be any subset of II of cardinality k. Consider a run p =<F, I, H> of R such that, 
for any q € II, I(q) = s q , and for any t £ T, F(t) = Hi- In other words, p is a run of R in 
which all processes start with initial value 1 and no process is faulty except the processes 
in LTi, ah of which initially crash. Since k < /, every process in II \ IIi eventually makes 
a decision in p, and all the decision values are identical; let d denote this common decision 
value. 

We now introduce the mapping /' which is identical to I over LT \ LTi and satisfies 
I'{p) = Sp for any process p in ITi . Then we consider p' =<F, I' , H>; we claim that p' is a 
run of R. Recall that the runs of R are defined by the compatibility rules Rl-6 introduced 
in Section 1.4.2. 

Since p is a run of R, it is straightforward that p' satisfies Rl, R2, R3, R5, and R6. By 
an easy induction, we see that for any process q, q / p, the sequence of the local states 
reached by q are the same in p' as in p. This ensures that every step in H is feasible from 

and so R4 holds in p' . Thus, p' is a run of R, and by the k- validity condition, the only 
possible decision value in p' is 0. This shows that d = 0. 

Now from p, we are going to construct a failure free run of R by using the asynchronous 
structure of computations. To achieve that, we need the following lemma, where Fq denotes 
the failure pattern with no failure (defined formally by Fo(t) = 0; f° r an Y t €T), and H [0, t] 
denotes the prefix in H of events with time less or equal to t. 

Lemma 5.2 For any to € T, there exists an extension H$ of H[0, to] such that <Fq, I, Hq> 
is a failure free run of R. 

Proof: The history Hq is constructed in stages, starting from H[0, to]; each stage consists 
in adding one event. A queue of the processes in II is maintained, initially in an arbitrary 
order, and the messages in f3 are ordered according to the time the messages were sent, 
earliest first. 

Suppose that the finite history Ho[0,t] extending H[0,to] is constructed. Let t + denote 
the successor of t in T, and let q be the first process in the process queue. After Ho[0,t], q 
may achieve only one type T of event. There are three cases to consider: 

1. T = S or T = Q. The automaton R(q) entirely determines the event e = (/?, q, t + , S, m) 
or e = (Cons(II, n — 1), q, t + , Q, v) which q may achieve at time t + . 

2. T = R. In this case, the message buffer j3 contains at least one message for q. Then 
we let e = (/3, q, t + , R, m), where m denotes the earliest message for q in /?. 

3. T = A. Form the successive consultations of O.Cons(II, n — 1) in -ffo[0, t], and focus on 
the latter consultation. Note that process q has necessarily queried O.Cons(II, n — 1) 
during this consultation; let v be the value of this query. There are three subcases: 

Case 1: CCons(II,n — 1) has already answered some value d. 
In this case, we let e = (Cons(II, n — 1), q, t + , A, d). 
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Case 2: O.Cons(II, n — 1) has not answered yet. 
We let e = (Cons(II,n - l),q,t+,A,v). 



The above procedure determines a unique event e, and we let i/o[0,i + ] = Hq[0, t];e 
(where semicolon denotes concatenation). Process q is then moved to the back of the 
process queue. 

This inductively defines Hq. By construction, pq = <^q, I , Hq> satisfies Rl-6, and so is 
a failure free run of R. □ Lemma 

We now instantiate to to be the time when the last process makes a decision in p. The 
lemma provides an extension Hq of H[0, to] such that pq =< Fq,I, Hq > is a run of R. The 
decision value in po is 0, which contradicts the fact that processes must decide on 1 in any 
failure free run of an algorithm solving A>TAg(II, /) in which all processes start with initial 
value 1. □ 

In the case / = 1, Theorem states that AC(n, 1) is not C-reducible to Cons(n, n — 1), 
and so reduces to Theorem 1.8.1. 



5.2 C-irreducibility to wait-free k-TAg tasks 

Theorem 5.3 For every integers n, k such that 2 < k < n — 1, Cons(ra, k) is not C -reducible 
to (&-l)-TAg(n,n - 1). 

Proof: We proceed by contradiction: let II be a set of n process names, and suppose 
that there is an algorithm R for Cons(II, k) using the oracle 0.{k— l)-TAg(il, n— 1). Recall 
that the sanctuary of this oracle is (k— l)-TAg(II, n— 1) itself (cf. Section 1.3.3); to simplify 
notation, we let a =(k— l)-TAg(II, n— 1). 

We fix some subset IIi C II of cardinality k — 1, and we denote IT' = IT \ ITi. From R, 
we shall design an algorithm A running on II', which uses no oracle. Then we shall prove 
that A solves the task Cons(II / , 1), which contradicts the impossibility of Consensus with 
one failure established by Fischer, Lynch, and Paterson [S] since |n'| = n — {k — 1) > 2. 

For each process q in II', we define the automata A(q) in the following way: 

• the set of states of A(q) is the same as the one of R(q); 

• the set of initial states of A(q) is the same as the one of R(q); 

• each transition (s q , [q, m, _L], s' q ) of R(q) in which q consults no oracle is also a transi- 
tion of A(q); 

• each transition (s q , [q,m, l],Sg) of R(q) in which the oracle answers 1 is removed; 

• each transition (s q , [q, m, 0], s' q ) of R(q) in which the oracle answers is replaced by 
the transition (s q , [q, m, _L], s' q ). 

Note that all the steps in A{q) are of the form [q,m, _L]; in other words, the algorithm A 
uses no oracle. 

Let pa =<F, I , H > be any run of A. Since A uses no oracle, each event in H is of 
the form e = (/?, q, — , — , — ) and is part of some transition (s q , [q, m, _L], s' q ) of A(q), where 
m € M U {null}. In the construction of A{q) described above, this transition results from 
some unique transition of R(q), of the form (s q , [q, m, _L], s' q ) or (s q , [q, m, 0], s q ). In this 
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way, to each event in H, we associate a unique transition of R(q) in which the oracle at 
sanctuary a is not consulted or answers 0. 

Now, to each run pa =<F, I, H> of A, we associate the triple pr =<F', I' , H'>, where 
the failure pattern F' is defined by 

F' : t e T ^ F'(t) = F(t) UUx, 

the mapping I' by: 

1. for any process q £ IT, I'(q) = I(q)', 

2. for any q G III, we let I'(q) = s® if I(p) = s® for some process p € II'; otherwise we 
let I'(q) = a\, 

and the sequence H' is constructed from H by the following rules: 

1. any event in H that is associated to a transition of R in which the oracle is not 
consulted is left unchanged; 

2. any event (f3, q, t, R, m) in H, even when associated to some transition in R(q) in 
which a is consulted, is left unchanged; 

3. an event q, t, S, m) in H which is associated to some transition in R(q) of the form 
(s q , [q, — , 0], s' q ), is replaced in H' by the three events series 

((cr, q, t, Q, v), (a, q, t, A, 0), (/?, q, t, S, m)), 

where v is the query value determined by s q . 

We claim that the triple pn so defined is a run of R. By construction of H', there is 
no event in H' whose process name is in IIi, and each event in H 1 at time t corresponds 
to at least one event in H that also occurs at time t. Since H is compatible with F and 
F'(t) = F(t) U IIi, it follows that H' is compatible with F'. For any process q £ II', H\q is 
well-formed, and so is H'\q. This proves that H' satisfies R2. 

From the R3, R4, and R6 conditions for H, it is also immediate to prove that in turn 
H' satisfies R3, R4, and R6. 

Now since F(t) C F'(t), every process q which is correct in F' is also correct in F, and 
so takes an infinite number of steps in H. By construction of H', it follows that q takes an 
infinite number of steps in H' . Thus H' satisfies R5. 

Finally, to show that pr satisfies Rl, we focus on a consultation of a in H' . By construc- 
tion of H' , the only value answered by the oracle at sanctuary cr is 0. This trivially enforces 
agreement. Since there are at least k — 1 faulty processes in F' , the answer is allowed for 
F' and any input vector V G {0, l} n with regard to the (k— Invalidity condition. Besides, 
every step in H is complete (with a receipt and a state change), and so by construction of 
H', the oracle answers in each consultation of H' . It follows that H'\a is an history of the 
oracle 0.{k — l)-TAg(II, n — 1). This completes the proof that /jr =<F',I',H'> is a run of 
R. 

Let pa be any run of A with at most one failure; in the corresponding run pn of R, at 
most 1 + (k — 1) = k processes fail . Since R is an algorithm that solves Cons(II, k), pr 
satisfies the termination, agreement, irrevocability and validity conditions of Consensus. It 
immediately follows that the run pa, which pr stems from, also satisfies the termination, 
agreement, and irrevocability conditions. Moreover, by definition of I', if all processes start 
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with the same initial value v in p^, then they also have the same initial value v in p^; the 
only possible decision value in pn, and so in pa, is v. 

Consequently, A is an algorithm for Cons(n', 1) using no oracle, a contradiction with |Hj. 

□ 

Notice that for k = 2, Theorem l5.3l states that Cons(n, 2) is not C-reducible to AC(n, n — 
1), and so reduces to Theorem 1.8.2. 

Importantly, we may safely substitute the consistent oracle c O.(k — l)-TAg(n, n — 1) for 
0.{k — l)-TAg(n,n — 1) in the proof of Theorem 15.31 In this way, we prove a result slightly 
stronger than Theorem 15.31 bv establishing that Cons(n, k) is actually not c C-reducible to 
(fc-l)-TAg(n,n- 1). 

Corollary 5.4 For any integers k,f,n such that 1 < k < / — 1 and f < n — 1, Cons(n,/) 
is not C C -reducible to fe-TAg(n, /). 

Proof: Suppose, for the sake of contradiction, that Cons(n, /) is c C-reducible to some k- 
TAg(n, /) with 1 < k < f — 1. Since / > fe+1, Cons(n, k+l) is a special case of Cons(n, /), 
and so 

Cons(n,A;+l) <c C Cons(n,/). 
Similarly, /c-TAg(n, /) is a special case of fc-TAg(n, n — 1), and we have 

k-TAg(n,f) <c C fc-TAg(n,n-l). 

Using transitivity of the c C-reduction, we obtain that Cons(n, k + 1) is c C-reducible to 
k-TAg(n, n— 1), a contradiction with the variant of Theorem 15.31 alluded above. □ 

5.3 A C-irreducibility result when a majority of processes may fail 

We now complete the comparison between the various fe-Threshold Agreement tasks for 
a fixed set of processes II and a fixed resiliency degree /. We are going to prove that if 
a majority of processes may be faulty (|II| < 2/), then Cons(II, /) is not C-reducible to 
/-TAg(n, /). Combining this latter irreducibility result with Theorem 15. 1| we conclude 
that with respect to <c , /-TAg(n, /) is incomparable with any of the equivalent tasks 
(/+l)-TAg(Tl, /),..., n-TAg(n, /) = Cons(n, /). 

Theorem 5.5 Let n and f be two integers such that 1 < / < n— 1. Ifn < 2/, then the task 
(/+l)-TAg(n, /) is not C-reducible to /-TAg(n, /), and so Cons(n, /) is not C-reducible to 
/-TAg(n,/). 

Proof: Let II be any set of n processes and let / denote an integer such that 1 < / < n— 1 
and n < 2f. Suppose, for the sake of contradiction that there is an algorithm R which 
solves (/+l)-TAg(n,/) using the oracle 0./-TAg(IL /). 

We partition II into two sets II' and IT" such that II' contains / processes, and II" 
contains the remaining n — f processes. Since n > /, we have / > 2/ — n; we fix any 
(possibly empty) strict subset ir' of II' with 2f — n processes. 

Consider the triple p' =<F' , I, H'> where the failure pattern F' is defined by 

F' :t£T -> F'{t) = vr' U IT 7 , 

the mapping / by: 
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1. for any process p S II' 



I(p) = s° p 



2. for any process p € II' 



lip) = s 



,1. 



and the sequence H' is constructed by induction on t £ T, as follows. 

First, H'[0, 0] is denned to be the empty sequence. A queue of the processes in II' \ it' 
is maintained, initially in an arbitrary order, and the messages in (3 are ordered according 
to the times the messages were sent, earliest first. Suppose that the finite history H'[0,t] 
is constructed. Let t + denote the successor of t in T, and let q be the first process in the 
process queue. After H'[0, t], q may execute only one type T of event. There are three cases 
to consider: 

1. T = SorT = Q. The automaton R(q) entirely determines the event e = (/?, q, t + , S, m) 
or e = (/-TAg(II, f),q, t + , Q, v) that q may execute at time t + . 

2. T = R. In this case, the message buffer (3 contains at least one message for q. Then 
we let e = ((5,q,t + ,R,m), where m denotes the earliest message for q in (3. 



The above procedure determines a unique event e, and we let H'[0, t + ] = H'[0,t];e. 
Process q is then moved to the back of the process queue. This inductively defines H' . 

Lemma 5.6 The triple p' =<F',I,H'> is a run of R in which every process in IT' \ ir' 
decides 0. 

Proof: By the definitions of F' and H\ it is immediate that p' satisfies properties R2-6. 
For Rl, the only non-trivial point is checking that H'\f-TAg(H, f) satisfies the /-validity 
condition, or in other words that the oracle is always allowed to answer 0. For that, we just 
need to observe that any process in 7r'Ull" takes no step in H 1 , and never queries the oracle 
C/-TAg(IT, /). Hence, (n — /) + (2/ — n) = f processes do not query the oracle, which is 
thus allowed to answer with respect to the /-TAg specification. It follows that p' satisfies 
Rl, and so is a run of R. 

Because R solves the task (/ + l)-TAg(II, /) and the number of faulty processes in p' 
is /, all the processes in IT' \ ir' make the same decision in p' . Let d! denote the common 
decision value in p' . 

Consider the mapping Iq such that for any process p in IT, Iq(p) = s2. Since every process 
in II" initially crashes in the failure pattern F' and p' is a run of R with the decision value 
d' , the triple <F' , Iq, H'> is also a run of R in which / processes are faulty and the decision 
value is d'. By the (/ + Invalidity condition, the decision value in this second run of R is 
equal to 0. Thus we derive that d' = 0. ^ Lemma 15^1 

Let 9' denote the first time when all processes in IT' \ ir 1 have made a decision in p'. 
Now, consider the triple p" =<F",I,H"> where the failure pattern F" is defined by 



and the sequence H" is constructed in the same way as H' with the additional requirement 
that the time of each event in H" is greater than 6'. A proof similar to the one of Lemma l5.6l 
shows the following: 



3 



T = A. We let e = (/-TAg(n, /), q, t+,A, 0). 



F" :t £T — > F"{t) = IT, 
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Lemma 5.7 The triple p" =< F" , I , H" > is a run of R in which every process in LT" 
decides 1. 

Let 9" denote the first time when all the processes in IT" have made a decision in p" . 
For any t € T, we let 

F(t) = when < t < 9" 
= IT when t>9". 

By construction, the time of each event in H" is greater than 9', and so we may form the 
finite history H'[0, 0'];H"[0, 9"}. 

Lemma 5.8 There exists an extension H of H'[0, 9']; H"[0, 9"] such that <F,I,H> is a 
run of R. 

Proof: The proof technique is similar to the one of Lemma 15.21 The history H is con- 
structed in stages, starting from H'[0, 9']; H"[0, 9"]; each stage consists in adding one event. 
A queue of the processes in LT" is maintained, initially in an arbitrary order, and the mes- 
sages in (3 are ordered according to the times the messages were sent, earliest first. 

Suppose that the finite history H[0, t] extending H'[0,9']; H"[0,9"] is constructed. Let 
t + denote the successor of t in T, and let q be the first process in the process queue. After 
H[0, t], process q may achieve only one type T of event. There are three cases to consider: 

1. T = S or T = Q. The automaton R(q) entirely determines the event e = (/?, q, t + , S, m) 
or e = (/-TAg(n, /), q, t + , Q, v) which q may achieve at time i + . 

2. T = R. In this case, the message buffer (3 contains at least one message for q. Then 
we let e = ((3, q, t + , R, m), where m denotes the earliest message for q in (3. 

3. T = A. In this latter case, we let e = (/-TAg(LT, /), q, t+, A, 0). 

The above procedure determines a unique event e, and we let H[0,t + ] = Ho[0,t];e. 
Process q is then moved to the back of the process queue. 

This inductively defines H. By construction, the triple p =<F, I, H> satisfies R2-6. Be- 
cause every process in LT' is faulty and | IT' | = /, the oracle C/-TAg(n, /) is always allowed 
to answer whatever query values are. This ensures that p satisfies Rl. Consequently p is 

a runoff. ^LemmaK® 

So, we have just shown that any algorithm using C/-TAg(II, /) for (/ + l)-TAg(IT, /) 
would have a run in which processes in LT' \ tt' decide and processes in LT" decide 1. Since 
/ < n — 1, both LT' \ tt' and LT" are non-empty; we then conclude that this run violates the 
agreement property, a contradiction. □ 

Observe that the latter proof crucially relies on the fact that the oracle C/-TAg(LT, /) 
is allowed to answer on the grounds of informations concerning future failures: whatever 
the query values are, C/-TAg(LT, /) may answer from the beginning in history H whereas 
no process will crash before time 9". In the next section, we shall actually prove that this 
C-irreducibility result does not hold anymore when considering oracles that do not see into 
the future. 
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Algorithm for process p 



Query( s 0.f-TAg(n,f))(v p ) 
Answer( s 0.f-TAg(n,f))(v) 
Query( s 0.f-TAg(Il,f))(l) 
Answer( s 0.f-TAg(U, f))(d) 
if d= 1 



then 

Decide(v) 
else 

Send{v p ) to all 

wait until [Receive (*) from n — / processes] (where * can be or 1) 

if at least one of the received values is 

then 

Decide (0) 



5.4 Sham oracles 

We now describe an algorithm that solves (/+l)-TAg(IT, /) with the help of some /-resilient 
oracle suitable for the agreement problem /-TAg for IT which does not see into the future. 
This reduction algorithm works for any resiliency degree, even when a majority of processes 
may fail, and so this mitigates the irreducibility result in Theorem 15.51 above. 

First, we formally define such oracles. Let II be a set of processes, and let F be any 
failure pattern for IT. For any 9 € T, Fq denotes the failure pattern for II defined by 



Definition 5.9 Let O a be an oracle whose set of consultants is IT. We say that O a is a 
sham oracle if for any failure pattern F for IT, any history H £ O a (F), and any time 6 6 T, 
there exists an extension H' of H[0,9] such that H' € O a (Fg). 

As for consistent oracles, for every task T = (P, /), we define the sham version of the 
oracle for T, denoted s O.T, as the most general sham oracle which is /-resilient and suitable 
for P. For any failure pattern F for IT, we have s O.T{F) C O.T(F). In other words, s O.T 
responses with less scope than O.T, and thus the answers given by s O.T may be thought as 
more precise than the ones given by O.T. So, the sham oracle s O.T is "at least as powerful 
as" O.T in the sense that any algorithm using O.T2 for some task T\ still solves T\ when 
using s O.T 2 . 

This leads to a new notion of reduction a la Cook, called s C-reduction and denoted 
< S (7, in which algorithms may only use sham oracles. Formally, T\ <sq T 2 if there is an 
algorithm for T\ using the sham oracle s O.T2- Since s O.T is at least as powerful as O.T, 
C-reducibility implies s C-reducibility. 



else 



Decide(l) 



Figure 



4: A s C-reduction from (/ + l)-TAg(IT, /) to /-TAg(n, /) 
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Theorem 5.10 Let n and f be two integers such that 1 < / < n — 1, and let II be a set of 
n processes. The algorithm in Figure^that uses s O./-TAg(II, /) solves (/ + l)-TAg(II, /), 
and so (/ + l)-TAg(n, /) is s C-reducible to /-TAg(n, /). 

Proof: First notice that Claims 01 and 02 also hold for any sham oracle s C/c-TAg(II, /). 

Let II be a set of n processes, and let p =<F, I , H> denote a run of the algorithm in 
Figure 0] with at most / failures. By the /-resiliency property, the oracle s C/-TAg(II, /) 
definitely answers in each of its two consultations in p. Let 0\ and 62 denote the first time 
when s O./-TAg(II, /) answers in the first and second consultation, respectively. 

Termination and irrevocability are obvious. To prove that p satisfies the agreement and 
(/+ Invalidity conditions, we shall distinguish the cases d = and d = 1 as we did for the 
c C-reduction in Theorem 13.41 

Case d = 1. In this case, it is immediate that p satisfies the agreement condition. Now we 
prove that p satisfies the (/ + Invalidity condition. 

1. Suppose that at least /+1 processes start with 0. Concerning the first consultation of 
s 0./-TAg(II, /), each of these processes which starts with either does not query the 
oracle (because it crashes) or queries it with value 0. By Claim 01, the first response 
given by s C/-TAg(II, /) is necessarily equal to 0, and processes decide 0, as required. 

2. Now assume that all the initial values are equal to 1. By Claim 01, at most / — 1 
processes do not query s 0./-TAg(II, /) twice, since the second answer d given by the 
oracle is 1. From the definition of a well- formed oracle history, it follows that no 
process queries s 0./-TAg(II, /) for the second time before time 6\. Thus, at most 
/ — 1 processes crash by time 6\ in F, and so 

\Faulty{F 01 )\ < f - 1. 

Because s O./-TAg(II, /) is a sham oracle, it is not allowed to answer in the first 
consultation. Therefore, v = 1 and processes decide 1 in p. 

Case d = . Since every query value is 1 in the second consultation of "0./-TAg(II, /), and 
s O./-TAg(II, /) is a sham oracle, we do know that in this case, at least / processes have 
crashed by time 62- At most / processes are faulty in F, and so exactly / processes have 
crashed by time 62- Thus, every correct process receives the same set of n — f initial values. 
This ensures agreement. We easily check that p satisfies the (/ + Invalidity condition. □ 

Combining Theorems 15.51 and 15.101 we derive that among agreement tasks, the C- 
reduction defines a strictly finer hierarchy than the s C-reduction. In other words, the 
sham oracle s O.T is in general more powerful than O.T: to be unable to see into the future 
actually helps to make a decision! 

Note that the two oracles c O.T and s O.T are generally not comparable. However, we 
easily check that the reduction from (/+l)-TAg(II, /) to /-TAg(II, /) described in Section l331 
still works when the reduction algorithm uses s O./-TAg(II, /) instead of c C/-TAg(II, /): 
the fact that s 0./-TAg(II, /) does not see into the future makes it sufficiently consistent and 
ensures that it cannot answer and then 1 with all the query values equal to 1. Conversely, 
note that the reduction described above does not work when substituting c C/-TAg(II, /) 
for*0./-TAg(II,/). 
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6 Wait-freedom vs. f-resiliency for Consensus tasks 



In the previous section, we have established various irreducibility results between pairs of k- 
Threshold Agreement tasks, only one of which is a Consensus task. Relying on these results, 
we are now in position to establish C-irreducibility results between Consensus tasks only. 
More precisely, we shall derive two C-irreducibility results between wait-free and /-resilient 
Consensus tasks first for a fixed set of processes, and then for a fixed resiliency degree. In 
both cases, we shall show that with respect to C-reduction, wait-free Consensus is strictly 
harder to solve than (non wait-free) /-resilient Consensus. We shall discuss the relationship 
between our results and previous ones established in the message passing model (012]) and 
in the shared objects model ([UEI31I1])- 

6.1 Wait-freedom and f-resiliency for a fixed set of processes 

Theorem 6.1 For any integers n and f such that 1 < / < n — 2, Cons(n, / + 1) is not 
C '-reducible to Cons(n, /). 

Proof: Suppose, for the sake of contradiction, that for some integers n, f such that 
1 < / < n — 2, we have Cons(ra, / + 1) <c Cons(n, /). We distinguish the following two 
cases: 

1. n<2(/ + l). 

The task Cons(n,/) is trivially a special case of Cons(n, / + 1), and so Cons(?7,, /) 
C-reduces to Cons(n, / + 1). By Proposition 12.11 the task (/ + l)-TAg(n, /) is a 
generalization of Cons(n, /); consequently Cons(n, /) C-reduces to (/+l)-TAg(n, /). 
In turn, (/+l)-TAg(n, /) is a special case of (/+l)-TAg(n, /+1), and so (/+l)-TAg(n, /) 
C-reduces to (/+l)-TAg(n, / + 1). By transitivity of <c , it follows that 

Cons(n, / + 1) < c (/ + l)-TAg(n, / + 1), 

which contradicts Theorem 15.51 

2. n > 2(/ + l). 

A fortiori we have n > 2/, and by Theorem 13.41 it follows that Cons(n, /) is C C- 
reducible to /-TAg(n,/). This latter task is trivially c C-reducible to /-TAg(n,/ + l) 
since it is a special case of /-TAg(n, / + 1). By transitivity of <cc, it follows that 

Cons(n,/ + l) <c C /-TAg(n,/ + l), 

which contradicts Corollary 15.41 

□ 

A straightforward consequence of Theorem 16.11 is the following. 

Corollary 6.2 For any integers n and f such that 1 < / < n — 2, the wait-free Consensus 
task Cons(n,n — 1) is of higher degree of unsolv ability than the f -resilient Consensus task 
Cons(n, /) with respect to <c ■ 
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6.2 Failure-Information reduction 



At this stage, it is worthy to compare Theorem 16.11 with a spinoff of the main results by 
Chandra, Hadzilacos and Toueg in [§J IS] concerning failure detectors solving Consensus 
tasks. In light of these two papers, it appears that all the Consensus tasks with a majority 
of correct processes require the same information about failures to be solved. Another way 
to say the same thing is that the weakest failure detectors for solving the various tasks 
Cons(n, 1), . . . , Cons(n, \n/2] — 1) are identical. From this standpoint, all these Consensus 
tasks are thus equivalent. 

This can be formalized by introducing a new notion of reduction - quite different from 
the notions of reduction a la Karp and a la Cook that we have studied up to now - which 
will measure the hardness to solve a task in terms of the information about failures that is 
required for solving the task. Using the notation and the definitions of the formal model of 
failure detectors in [H], we formally capture this notion of Failure-Information reduction in 
the following definition. 

Definition 6.3 Let T\ and T2 be two tasks for a set II of processes. We say that T\ is 
i^J-reducible to T<i, and we note T\ <fi^2, if any failure detector T> which can be used to 
solve T2 can also be used to solve T\. 

Since a task is solvable iff it is solvable using the trivial failure detector T>q, 4 we immediately 
derive the following proposition. 

Proposition 6.4 lfT\ FI -reduces to T2 and T2 is a solvable task, then T\ is solvable. 

Moreover, ^/-reduction is reflexive and transitive. Consequently, as discussed in Part I 
for our previous notions of reduction, it makes sense to order tasks with respect to their 
"Fl-difficulty" , that is with respect to <fi ■ 

In particular, we define two tasks T\ and T2 to be Fl-equivalent (7\ =fi T2) when 
T\ <fi T2 and T2 <fiT\- As an immediate consequence of the reflexiveness and transitivity 
of <fi , the relation =fi is an equivalence relation. 

Arguing as in the proof of Proposition 1.6.2, we obtain that C-reducibility implies FI- 
reducibility: if T\ <c^2 then T\ <fiT2- 

As a consequence of the main results in H3 E] , we are g° m g to prove that for a fixed 
set of processes, all the Consensus tasks with a majority of correct processes have the same 
degree of unsolvability with respect to <fi ■ 

Proposition 6.5 For every integer n, n > 3, the tasks Cons(n, 1), . . . , Cons(n, \n/2] — 1) 
are all FI- equivalent. 

Proof: Since Cons(n,/ + l) trivially generalizes Cons(n, /), Cons(n,/) is -Fl-reducible to 
Cons(n, / + !). In particular, we have 



Conversely, suppose that some failure detector V can be used to solve Cons(n, 1). By [S], 
we know that T> is at least as strong 5 as the failure detector Q. (Recall that Q is the most 

4 The trivial failure detector T>o is the function that maps each failure pattern F to the singleton {Ho}, 
where Ho is the failure detector history such that for any time t € T and any process p 6 II, Ho(p,t) = 0. 
In other words, Do never suspects any process. 

5 Here, we refer to the partial ordering on failure detectors defined in 0. 
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general failure detector such that eventually, all the correct processes always trust the same 
correct process.) Moreover, Theorem 3 in j^] asserts that Cons(n, |~n/2] — 1) is solvable 
using f2, and so using D. This shows that Cons(n, |~n/2] — 1) is -Fi-reducible to Cons(n, 1), 
i.e., 

Cons(n, \n/2] - 1) < FI Cons(n, 1). (3) 

From © and j2J), it follows that all the tasks Cons(n, 1), . . . ,Cons(n, \n/2\ — 1). are FI- 
equivalent. □ 

Together with Theorem 16. 11 Proposition 16 . 51 shows that the C-hierarchy is strictly finer 
than the Fl-hierarchy. In other words, the minimal information about failures required to 
solve a task - or equivalently the weakest failure detector needed to solve it (if it exists) - 
does not fully capture the hardness to solve the task. 

6.3 Wait-freedom and f-resiliency for a fixed resiliency degree 

We now prove that for a fixed resiliency degree, the smaller the set of processes is, the 
harder the Consensus tasks are. In particular, the wait-free Consensus task Cons(/+l, /) is 
of higher unsolvability degree than any non-wait free /-resilient Consensus task Cons(n, /) 
with respect to <c ■ 

The proof is by a "meta-reduction" to the result in the previous section between wait- 
free and /-resilient Consensus tasks for a fixed set of processes: we shall show that from 
any hypothetical C-reduction from Cons(n,/) to Cons(n + 1, /), we might construct a C- 
reduction from Cons(n, /) to Cons(n,/ — 1). 

Theorem 6.6 For any integers n and f such that 1 < / < n — 1, Cons(n, /) is not C- 
reducible to Cons(n+l,/). 

Proof: Suppose, for the sake of contradiction, that there is an algorithm R° for Cons(?i, /) 
using the oracle CCons(n + 1, /). From R°, we shall construct an algorithm R that also 
solves Cons(n, /) but using the oracle CCons(n,/ — 1), which contradicts Theorem 16.11 
Let us recall that the sanctuary of O.T is T (cf. Section 1.3.3). We denote 

a = Cons(n+l, /) and a = Cons(n, / — 1) 

the sanctuaries of CCons(n+l, /) and O.Cons(n, / — 1), respectively. Let R be the algorithm 
using the oracle of sanctuary a such that, for any process p £ {1, • • • the automaton 
R(p) coincides with R°(p). We claim that R solves Cons(n, /). 

Let p =<F, I, H> be any run of R. From H, we construct a sequence H° of events 
as follows: H° is identical to H except for events of type (a,p, t, Q, v) and (a,p,t,A,d) 
which are replaced by (ao,p, t, Q, v) and (ao,p, t, A, d), respectively. In other words, H° is 
obtained from H by just substituting a for a. Let us now consider p° =<F, I, H°>; we 
argue that p° is a run of R°. 

Since p satisfies R2 and R3, the run p° also satisfies R2 and R3 by construction of H°. 
For every process p, the automata R{p) and R°(p) are identical, and so p° satisfies R4 as 
p does. From the definition of p°, we have Locked(p°) = Locked(p); it follows that p° also 
satisfies R5 and R6. 

It remains to prove that p° satisfies Rl . We use the same notation as the one introduced 
in Section 1.4.2. In particular, we have 

F a o = F U {n + 1} and F a = F. 
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Clearly, H°\a is well- formed and compatible with F a o as H\a is with F a . The more 
delicate point to prove is that H°\a° is indeed a history of the oracle CCons(n+l, /), i.e, 
H°\a° £ O.Cons(ra+l, f)(F a o). For that, consider any consultation H9 in H° of sanctuary 
do; it naturally corresponds to a single consultation of a in H with the same queries 
and responses as in H®. Agreement in ensures agreement in H®. For validity, form the 
query vector W for H®, and let V° be any extension of W in {0, l}^ 1 ' "' < n ^ 1 ^ . The projection 
V of V° onto {0, l}' 1 '"' is an extension of W in {0, l}^ 1 ' " ' n \ Since W is also the query 
vector in H^, it follows that any decision d in fljP - which is also a decision value in - 
is allowed by the Cons.n ... n i specification, that is 

d £ Cons{i i ... jn }(i ? (7 , V). 

By definition of the Consensus mappings (cf. Section 1.2.2), we have 

Cons {li ... jn} (F CT ,F) C Cons {h ..^ nn} (F a0 ,V ) 

since is an extension of V. It follows that 

d€ Cons {li ... >n+1} (F ff o,y°). 

This shows that H% satisfies the Consj^... l7 »fi}- validity condition. Moreover, the number 
of queries in H% is the same as in Hy.. Therefore if there are at least (n + 1) — / queries in 
H%, then there are at least = n — (/— 1) queries in H^, and the oracle CCons(n,/ — 1) 
necessarily answers in Hk- It follows that any consultation in H? with at least (n + 1) — / 
queries contains a response to any correct process in F a o. Hence, H°\a° is a history of 
O.Cons(n+l,/). 

This shows that p° is a run of R . As R° solves the task Cons(n,/), if at most / 
processes are faulty in F, then p° satisfies the termination, irrevocability, agreement and 
Cons/i n }-validity conditions . Since p and p° are identical up to a renaming of a into o , p 
also satisfies these conditions. Therefore R solves Cons(n, /) using the oracle Cons(n, /— 1), 
a contradiction with Theorem 15.51 □ 

Corollary 6.7 For any integers n and f such that 1 < / < n — 2, the wait-free Consensus 
task Cons(/+l,/) is not C-reducible to the f -resilient Consensus task Cons(n, /). 

Proof: Let us assume, for the sake of contradiction, that Cons(/ + l, /) is C-reducible to 
Cons(n, /) for some integer n, n > f + 2. By repeated applications of Proposition 1.7.4 and 
transitivity of C-reduction, we obtain that Cons(n — 1, /) is C-reducible to Cons(/ + l, /), 
and so Cons(n — 1,/) is C-reducible to Cons(n, /), which contradicts Theorem 16.61 □ 

6.4 Related work: reducibility and unsolvability 

At first sight, Theorem 16.61 and Corollary 16.71 conflict with Borowsky and Gafni's simula- 
tion [21 and more specifically with prior work for Consensus tasks by Lo and Hadzila- 
cos ^U], and by Chandra, Hadzilacos, Jayanti, and Toueg [3JII1- 

Recall that Borowsky and Gafni's simulation consists in a general algorithm in the 
shared memory model which allows a set of / + 1 processes with at most / crash failures to 
simulate any larger set of n processes also with at most / crashes. Its variant for Consensus 
tasks provides a transformation of algorithms that solve the /-resilient Consensus task 
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for n processes using read/ write registers into algorithms that solve the wait-free Consensus 
task for / + 1 processes or using registers also. 6 (The easily established unsolvability of 
Cons(/+l, /) therefore entails the unsolvability of Cons(n, /) in the shared memory model.) 

We could think to explain the discrepancy between the existence of such an algorithm 
transformation and our irreducibility statement in Corollary 16 . 71 by the fact that the message 
passing and the shared memory models are precisely not equivalent here (a majority of 
processes may fail in the wait-free case). However, a closer look at this transformation 
reveals that this discrepancy actually results from a more fundamental point which is worth 
being underlined. 

Indeed the transformation works as follows. Consider any algorithm for the task Cons(n, /) 
using registers, and let us fix a set of / + 1 processes. The instructions in the n codes are 
distributed over the / + 1 processes in a fair fashion way, and one by one. The key point 
is that the cooperation between processes that is necessary for a correct execution of the 
whole code for Cons(n, /) can be achieved by the processes themselves using registers only. 
Translating this transformation in terms of oracle-based reductions would require that pro- 
cesses may access the internal mechanism of the oracle for Cons(n, /) for sharing it between 
them. Basically, this is opposed to the notion of oracles which are closed black boxes that 
cannot be opened and dismantled. 

The same argument explains the apparent contradiction between another prior work 
about Consensus tasks in the shared memory model and the results established in the 
previous section: In JO]; Lo and Hadzilacos show how to convert any algorithm that solves 
the one-resilient Consensus task for n processes using some set of object types S into an 
algorithm that solves the one-resilient Consensus task for n — 1 processes using the same set 
of types S, when n is greater than 3. That contradicts an immediate spinoff of Theorem 16. 61 
which states that Cons(n — 1,1) is not C-reducible to Cons(n, 1). The techniques used 
in [3] and ^U] are similar, and the schemes of the two key transformations of Consensus 
algorithms are identical. As a matter of fact, Lo and Hadzilacos's transformation, like the 
one in [3], corresponds to no oracle-based reduction in the asynchronous message passing 
model. 

At that point, one might argue that the notion of oracle-based reducibility is too strong 
to capture such algorithm transformations, and so is not really useful. However, as in the 
classical theory of computation, oracles have been introduced for the purpose of classifying 
undecidable/unsolvable problems/tasks. Indeed, any reduction whose formal definition is a 
condition quantified over algorithms instead of oracles, of the type 

(*) T\ is reducible to T<i if any algorithm solving T2 can be "transformed" into 
some algorithm solving Ti, 

is trivial in the class of unsolvable tasks, since the above condition is tautologically satisfied 
by any task T\ when the task Ti is unsolvable. This observation may be applied to the 
pair of tasks T\ = Cons(/ + 1,/) and T2 = Cons(n, /), or to T\ = Cons(n — 1,1) and 
Ti = Cons(n, 1), and finally shows that the transformations in [31 E3, which actually lead 
to unsolvability results, however correspond to no meaningful reduction, oracle-based or of 
the type (*). 

This discussion illustrates the difficulty in introducing significant and well-defined no- 
tions of reducibility relating unsolvable distributed tasks. Above all, any such reducibility 
notion should correspond to a hierarchy on distributed tasks, on the model of the Turing 
(resp. the Cook) hierarchy on problems, the solvable tasks playing the role of decidable 

6 Actually, Chandra et al. transformation works for any set of object types including read/write registers. 
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(resp. polynomial-time decidable) problems. The oracle-based notions of reducibility that 
we have introduced in this paper, especially the C- and C*-reductions, give rise to non- 
trivial and sometimes unexpected results relating diverse classical distributed tasks, and 
qualify as appropriate counterparts of the Turing and Cook reductions in the framework of 
distributed computing. 
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